Kaspersky Lab kaspersky anti-virus 5.5 for proxy server Mode D'Emploi

icap_enable on  

icap_send_client_ip on 

icap_service is_kav_resp respmod_precache 0 
icap://localhost:1344/av/respmod 

icap_service is_kav_req reqmod_precache 0 
icap://localhost:1344/av/reqmod 

icap_class ic_kav is_kav_req is_kav_resp 

icap_access ic_kav allow all 

They will make the proxy transmit all requested objects to Kaspersky Anti-
Virus via port 1344 of the local interface. 

2.2.2. Installation on a dedicated server 

Installing the application to a dedicated server is recommended in case of high 
load on the proxy server and in situations when Kaspersky Anti-Virus is used to 
process the traffic of several proxy servers. 

Since such deployment scheme does not allow automatic configuring of the 
application, you should set it up manually in accordance with the following 
procedure: 

1. After application setup use the ListenAddress parameter in the 

[icapserver.network] section of the kav4proxy.conf  configuration file to 
specify the IP address of the network interface and port that Kaspersky 
Anti-Virus will use to wait for proxy requests to process necessary 
objects. By default Kaspersky Anti-Virus waits for requests to all network 
interfaces of the server on port 1344. 

2.  Add the following lines to the ICAP OPTIONS section of the Squid proxy 

configuration file 

icap_enable on  

icap_send_client_ip on 

icap_service is_kav_resp respmod_precache 0 
icap://<ip_address>:<port>/av/respmod 

icap_service is_kav_req reqmod_precache 0 
icap://<ip_address>:<port>/av/reqmod 

icap_class ic_kav is_kav_req is_kav_resp 

icap_access ic_kav allow all 

where  <ip_address>

 

stands for the IP address of the server where 

Kaspersky Anti-Virus is installed; <port> is the port that Kaspersky Anti-
Virus uses to wait for proxy requests for anti-virus processing. Restart 
Squid as soon as the changes are entered.